Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a383130303a3a2f34302d3430203d3e20323635333933.roa
File: 323830343a333336343a383130303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier: 4oId7Pb4WzeYi6jBdiJFFsFBRipFzk6OPcATCZHxkHk=
Subject key identifier: 3A:0F:89:4D:70:AE:E7:AA:D3:26:21:8E:C9:B6:FF:44:58:41:31:9B
Certificate issuer: /CN=1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7
Certificate serial: 53683F0933719D944C533EC06E0313BCDF221680
Authority key identifier: 1A:11:9F:EF:97:A1:58:C2:B8:C8:60:79:AD:0C:32:2A:8E:8A:AF:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a383130303a3a2f34302d3430203d3e20323635333933.roa
Signing time: Tue 14 Jan 2025 15:48:58 +0000
ROA not before: Tue 14 Jan 2025 15:43:58 +0000
ROA not after: Tue 13 Jan 2026 15:48:58 +0000
asID: 265393
IP address blocks: 2804:3364:8100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:68:3f:09:33:71:9d:94:4c:53:3e:c0:6e:03:13:bc:df:22:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7
Validity
Not Before: Jan 14 15:43:58 2025 GMT
Not After : Jan 13 15:48:58 2026 GMT
Subject: CN=3A0F894D70AEE7AAD326218EC9B6FF445841319B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:1c:2e:94:05:f8:15:4d:30:41:da:03:ac:
dd:cd:61:cb:5b:ec:d7:14:aa:80:52:16:9f:4a:dc:
20:32:b0:e0:20:9b:9f:fb:0f:30:b1:75:94:5e:23:
58:77:77:4e:a7:8e:2f:4f:49:0b:3b:e4:57:49:de:
59:fd:09:35:53:29:74:6d:e4:d3:b6:71:f8:8e:d8:
3c:5a:e2:7d:d5:fe:be:6d:43:03:7b:61:0b:37:48:
13:d0:aa:81:71:ae:83:f8:dc:26:81:f1:7a:53:a8:
36:5f:33:b5:a8:40:fa:97:5f:c1:84:75:5e:4b:78:
84:29:49:e9:e7:13:fe:8b:cf:b8:31:69:b7:f3:c2:
e3:a6:dd:69:f3:02:e3:08:3d:15:18:9e:0c:bc:aa:
01:e2:58:3e:75:6a:47:0b:36:ed:03:98:1e:c7:b4:
2f:32:7d:1a:b0:48:7e:d8:5c:14:de:39:dc:fa:a5:
08:41:c5:2c:5a:4e:e8:b5:b7:bf:70:2d:c5:9a:b6:
53:cc:ce:af:bc:55:d5:9e:e6:d4:1c:43:9e:3d:03:
e7:3c:a2:fe:44:37:51:ca:76:a2:b2:b0:67:ce:d1:
28:26:68:d0:8c:98:56:7d:11:bc:be:dd:40:af:c7:
2d:e5:80:ea:b7:e3:cb:82:a5:3a:14:c7:a1:c4:f0:
ee:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0F:89:4D:70:AE:E7:AA:D3:26:21:8E:C9:B6:FF:44:58:41:31:9B
X509v3 Authority Key Identifier:
keyid:1A:11:9F:EF:97:A1:58:C2:B8:C8:60:79:AD:0C:32:2A:8E:8A:AF:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a383130303a3a2f34302d3430203d3e20323635333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3364:8100::/40
Signature Algorithm: sha256WithRSAEncryption
be:0c:cc:2b:51:11:c2:39:bb:95:54:0a:6e:00:89:3a:a2:3e:
f5:13:c1:9d:ae:48:60:19:f6:d0:5d:da:bc:e0:6f:95:3f:8e:
95:29:45:19:44:a5:0f:87:91:1c:74:e2:3b:e3:fd:86:e8:41:
84:34:5c:51:68:ea:b4:9e:6f:79:c5:57:ff:e1:0f:36:8f:f7:
25:0e:e2:35:e9:54:39:59:9f:81:33:c7:04:62:fb:b4:95:c1:
c2:6f:ae:de:83:13:bc:ce:dc:9f:fc:99:60:fb:1a:1e:37:96:
3a:cf:f4:c5:12:3e:2e:58:f9:bd:3f:99:9c:d4:b5:cc:68:55:
bb:ec:2b:08:3c:e3:74:05:94:23:ed:e9:f0:e5:6e:b2:a8:9b:
c6:73:94:3b:1e:a9:94:a8:53:6d:1d:36:ef:24:86:30:40:19:
1d:57:10:14:a4:84:cb:a0:cd:8f:3a:46:31:1f:91:f5:0f:3d:
7a:2d:95:5d:c3:6b:89:a4:74:60:1f:8f:85:d8:67:aa:24:65:
7e:db:cc:36:48:e8:28:00:2c:cb:54:e5:ae:2d:96:2b:48:a8:
e5:50:b0:ec:bf:f2:eb:ce:50:1d:11:f0:5d:bf:01:27:6b:a9:
b9:74:8f:d4:77:15:b8:d1:f3:b4:7c:09:26:56:60:7a:f9:44:
96:85:94:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:03:34 2025 by rpki-client